From 1c71c09da8990c2356151ab51cc3607d9e9089ff Mon Sep 17 00:00:00 2001 From: tedu Date: Tue, 29 Apr 2014 14:10:07 +0000 Subject: [PATCH] nginx dudes unrolled SSL_OP_ALL by hand so we also have to delete SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS from here to benefit. ok miod --- usr.sbin/nginx/src/event/ngx_event_openssl.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/usr.sbin/nginx/src/event/ngx_event_openssl.c b/usr.sbin/nginx/src/event/ngx_event_openssl.c index 915e604bbbc..81a1e42d81c 100644 --- a/usr.sbin/nginx/src/event/ngx_event_openssl.c +++ b/usr.sbin/nginx/src/event/ngx_event_openssl.c @@ -192,8 +192,6 @@ ngx_ssl_create(ngx_ssl_t *ssl, ngx_uint_t protocols, void *data) SSL_CTX_set_options(ssl->ctx, SSL_OP_TLS_D5_BUG); SSL_CTX_set_options(ssl->ctx, SSL_OP_TLS_BLOCK_PADDING_BUG); - SSL_CTX_set_options(ssl->ctx, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS); - SSL_CTX_set_options(ssl->ctx, SSL_OP_SINGLE_DH_USE); if (!(protocols & NGX_SSL_SSLv2)) { -- 2.20.1